Threat Advisories:

Vidar Stealer 2.0 Distributed via Fake Game Cheats on GitHub and Reddit Targeting the Lens: Iranian Cyber Operations Against IP Cameras in the Middle East Konni APT’s Covert RAT Deployment LeakNet Ransomware’s Low-Cost High-Scale Infection Strategy Phishing in the Fog of War: A Surge in State-Aligned Espionage Campaigns Google Rushes to Fix Actively Exploited Flaws VENON Trojan Targets 33 Brazilian Financial Platforms AI-Assisted Slopoly Backdoor Powers Interlock Ransomware Intrusion PhantomRaven: Multi-Wave npm Campaign Stealing CI/CD and Developer Credentials APT28 Deploys Modified Covenant to Spy on Ukrainian Government Microsoft’s March 2026 Patch Tuesday Fake Strike Reports, Real Malware: The LOTUSLITE Delivery Chain Microsoft Teams Social Engineering Delivers A0Backdoor Malware Void Manticore: Iran’s Evolving Cyber Warfare Model Cisco Warns of Actively Exploited Flaws in Catalyst SD-WAN Manager ClipXDaemon Clipboard Attack: Linux Malware Targeting Crypto Payments VMware Patches Aria Operations Flaws as Exploitation Emerges in the Wild Iran-Linked Dust Specter Launches Cyberattack on Iraqi Officials Ruby Jumper: APT37’s Cloud-to-Air-Gap Espionage Framework Dohdoor Malware Campaign Targeting U.S. Education and Healthcare Sectors

Critical Threat Research : Middle-East at WAR: The Rapidly Escalating Iranian Cyber Threat Download the Report

Book a Demo Threat Digest - Subscribe

LOLKEK Ransomware Evolving New Tactics to Evade Detection

Threat Level – Amber | Vulnerability Report

LOLKEK ransomware is still being actively developed and uses new tactics to evade detection, including obfuscation, legitimate tools, and network shares. It encrypts all drives, including network shares, and demands 0.1 Bitcoin in ransom.

To receive real-time threat advisories, please follow HiveForce Labs on LinkedIn.

What’s new on HivePro

Get through updates and upcoming events, and more directly in your inbox